I saw someone describe how they reused the key across customers for memory saving (but still one cert per customer domain) in a help thread on Let's Encrypt community forums. But I don't know if they were also accepting customer uploaded certs. I think my main point is that if we decide that a CSR is POP, we need to start telling people that a CSR needs to be kept secret, because that is not obvious now, and we can think of scenarios where someone might share CSRs today, which may be insecure practice in the future.
Den lør. 5. feb. 2022 kl. 20.24 skrev Ryan Sleevi <[email protected]>: > Are we just coming up with random hypotheticals here? > > Do you know of any provider that does this? > > Is there any counter-proposal for how to ensure that Subscribers with > certificates today can reliably revoke their existing certificates? Or are > folks coming up with these scenarios actively rejecting this as a valid > need? > > I don’t disagree that, as with anything, we have risks. I think Rob’s > scenario points, somewhat, to the need to curtail domain reuse as narrowly > as possible (hours, not years). > > I’d be curious to know what the alternatives folks are proposing, or > whether it really is to tell Subscribers “tough, you’ve got another hoop to > jump through to get these certificates revoked”. Because if we’re willing > to do that, wouldn’t it be better to instead do something like mandate all > CAs support ACME, to at least provide a consistent protocol for this? > -- You received this message because you are subscribed to the Google Groups "[email protected]" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CACAF_WiQmexceytd6zGNDDV_E24XfOQX-_QuTE-3yBZzrJc0SA%40mail.gmail.com.
